Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/M44WkeVy9373wx_YNEkkgbgJOV4.roa
File: M44WkeVy9373wx_YNEkkgbgJOV4.roa (raw, json)
Hash identifier: Xn9wGIGbeSMTrOpKp1r99SKYtFFXH6dSs+V+jex8rIk=
Subject key identifier: 33:8E:16:91:E5:72:F7:7E:F7:C3:1F:D8:34:49:24:81:B8:09:39:5E
Certificate issuer: /CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b
Certificate serial: 0194282364D44F92B6907845E17EE0F441A8
Authority key identifier: B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/M44WkeVy9373wx_YNEkkgbgJOV4.roa
Signing time: Thu 02 Jan 2025 17:49:55 +0000
ROA not before: Thu 02 Jan 2025 17:49:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5400
IP address blocks: 212.49.131.0/24 maxlen: 24
212.49.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:64:d4:4f:92:b6:90:78:45:e1:7e:e0:f4:41:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b
Validity
Not Before: Jan 2 17:49:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=338e1691e572f77ef7c31fd834492481b809395e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8a:15:93:7a:25:58:33:5a:6b:84:cc:4a:1e:
82:09:b8:55:0f:d8:3a:d1:a2:ad:01:0e:8a:42:28:
50:d1:d7:f3:c7:aa:f3:1e:1f:c4:8c:d3:6a:d2:b4:
19:62:e7:e5:ad:dc:9d:45:7f:2d:f9:73:1f:9f:6b:
f1:b0:87:e0:cc:c1:41:1b:b0:52:b8:aa:47:b3:93:
d0:42:3c:09:dd:c0:8a:c3:41:d5:f7:76:f9:a8:82:
7f:5a:85:4c:b8:31:f6:85:15:65:04:bf:d9:8c:f0:
7a:0c:11:da:d8:59:a6:98:ba:93:f0:08:fb:cd:75:
a3:2f:c1:10:f1:61:db:7f:de:fa:3b:30:cf:cc:4a:
f5:da:e2:07:c1:d5:0b:fd:f6:81:70:2d:b3:39:52:
bf:c7:a7:4e:fb:7e:93:8b:3d:0c:f7:fd:11:53:89:
60:43:ef:fb:4d:3d:c0:68:04:2f:a8:c5:bf:8d:45:
8c:cf:e3:c4:03:59:c8:c7:ae:fe:03:2c:c6:25:ee:
97:fb:71:43:e6:d0:b0:d0:0b:c7:b4:1f:91:1d:2e:
cb:fb:c1:36:01:68:53:ef:9e:85:db:44:e2:b2:4c:
21:44:1c:ef:2b:a2:c8:54:74:09:74:c2:7f:df:29:
b8:7e:a3:77:93:9a:92:90:ce:76:bf:8f:7c:48:50:
90:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:8E:16:91:E5:72:F7:7E:F7:C3:1F:D8:34:49:24:81:B8:09:39:5E
X509v3 Authority Key Identifier:
keyid:B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/M44WkeVy9373wx_YNEkkgbgJOV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.49.131.0/24
212.49.190.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:ec:d7:81:01:17:e9:08:64:5e:88:9a:2a:07:4c:6a:a6:4c:
99:48:da:55:24:bb:6c:96:02:4e:6c:d0:12:11:c4:73:bf:b0:
22:60:e1:89:3c:2f:e0:80:7d:76:dc:f9:2f:eb:c4:8d:05:3f:
1e:89:a1:54:56:4e:a7:a6:5d:6f:f9:e8:51:c5:f2:2b:7d:d9:
33:1d:e3:39:dd:70:ca:74:db:f6:34:05:b0:bd:e0:73:70:90:
21:23:4f:6e:e9:83:cd:03:c2:03:80:87:0b:93:2c:71:ee:d7:
cd:65:0e:56:89:99:73:b3:bd:38:15:e1:b7:77:55:48:58:ec:
5c:54:a8:30:e4:6c:95:28:97:a6:d0:b0:51:70:e8:61:cc:54:
83:82:32:e9:01:b7:02:a5:2e:56:18:98:50:e6:e6:cf:61:60:
a1:40:c2:79:7c:1f:bf:12:7b:49:e9:f7:69:17:e5:ca:7d:59:
40:d9:aa:65:88:b4:95:09:94:ff:6a:4d:38:4a:e2:c4:34:80:
78:67:71:c8:83:fe:ec:57:9c:07:28:6f:54:f9:d1:b3:fb:2a:
a6:95:34:2c:90:83:02:e5:a7:04:46:17:2e:e1:d8:68:3d:78:
6a:d8:71:c6:34:88:2d:90:02:48:da:46:a9:e9:a4:8e:18:c7:
89:d6:e3:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:54:40 2025 by rpki-client